A 2021 firmware bug collapsed Coldcard's seed entropy from 128 bits to 40. Five years later, an attacker drained $89M in Bitcoin across 4,585